CVE-2026-4377

Vulnerability Description

Dlink DWR-X1820 router uses weak default password generated from its IMEI number and does not require users to change it. An attacker who knows how passwords are generated can easily crack the default password if they have the device IMEI number. This issue was fixed in version 1.00B16CP.

Related Weaknesses (CWE)

CWE-1391

References

https://cert.pl/posts/2026/05/CVE-2026-4377
https://www.dlink.com/pl/pl/products/dwr-1820-cp#support

FAQ

What is CVE-2026-4377?

CVE-2026-4377 is a documented vulnerability. Dlink DWR-X1820 router uses weak default password generated from its IMEI number and does not require users to change it. An attacker who knows how passwords are generated can easily crack the default...

How severe is CVE-2026-4377?

CVSS scoring is not yet available for CVE-2026-4377. Check NVD for updates.

Is there a patch for CVE-2026-4377?

Check the references section above for vendor advisories and patch information. Review vendor security bulletins for remediation guidance.